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Top Stories 

• About 25 families in eastern Ohio remained displaced December 17 following a natural gas 
leak from a fracking well that prompted houses within a 1.5-mile radius to evacuate 
December 13. - Columbus Dispatch (See item 1) 

• New York based cosmetics company, Avon Products Inc., agreed to pay $67 million to 
settle criminal and civil charges by the U.S. Securities and Exchange Commission after its 
China division pleaded guilty December 17 to violating the Foreign Corrupt Practices Act 
(FCPA). - U.S. Securities and Exchange Commission (See item 5) 

• Ten passengers on board a New Jersey Transit bus were injured following a multi- vehicle 
accident involving 3 semi-trucks December 17 that shut down northbound lanes of the New 
Jersey Turnpike near Finden for nearly 5 hours. - NJ.com (See item 7) 

• A Chicago, Illinois businessman and his wife were convicted December 17 on more than 
one dozen counts including conspiracy, mail fraud, and money laundering for stealing $3.4 
million in grants through the Illinois Department of Public Health for personal expenses. - 
Associated Press (See item 16) 
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Energy Sector 



1. December 17, Columbus Dispatch - (Ohio) Families flee out-of-control natural gas 
leak at eastern Ohio fracking well. About 25 families in eastern Ohio remained 
displaced December 17 due to a natural gas leak after crews resumed operations at a 
temporarily plugged fracking well in Monroe County that began to flow uncontrollably, 
prompting the evacuation of houses within a 1.5-mile radius of the well December 13. 
Source: http ://w w w ■dispatch.com/content/stories/local/20 14/12/ 1 7/families-flee-out-of- 
control-natural-gas-leak.html 

2. December 16, Austin American-Statesman - (Texas) Austin Energy employees 
accused of stealing copper wire. Two Austin Energy employees and at least seven 
other people were charged December 15 of stealing thousands of pounds of copper as 
part of an alleged metal theft ring after investigators discovered thousands of pounds of 
copper were stolen and recycled for money. The total value of copper that was stolen 
was estimated at $100,000. 

Source: http://www.statesman.com/news/news/crime-law/austin-energv-employees- 
accused-of-stealing-copper/niTG8/ 

For another story, see item 24 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

3. December 18, Associated Press - (Nebraska) Nebraska power plant taken 
temporarily offline. The operators of the Fort Calhoun nuclear power plant in 
Nebraska took the plant offline December 17 due to a lockout of the main generator. 
The plant remains at normal operating pressure and temperature while generation is 
offline as workers are investigating the cause of the lockout. 

Source: http ://w w w . 1011 no w .com/news/headlines/Nebraska-Po wer-Plant-T aken- 
Temporarily-Offline-286217561.html 

[ Return to top i 

Critical Manufacturing Sector 

4. December 18, U.S. Consumer Product Safety Commission - (National) Schneider 
Electric recalls PowerPact J-Frame Circuit Breakers due to fire, burn, electrical 
shock hazards. Schneider Electric announced a recall for about 62,500 PowerPact J- 
Frame Circuit Breakers due to the potential for the breakers to fail to trip during an 
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overload posing fire, burn, and electric shock versions. 

Source: http://www.cpsc.gov/en/Recalls/2015/Schneider-Electric-Recalls-PowerPact-J- 
Frame-Circuit-Breakers/ 



For another story, see item 24 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

5. December 17, U.S. Securities and Exchange Commission - (International) SEC 
charges Avon Products, Inc. with Fcpa violations. Avon Products Inc. agreed to pay 
$67 million in disgorgement and interest to settle charges filed December 17 by the 
U.S. Securities and Exchange Commission accusing the beauty products company of 
violating the Foreign Corrupt Practices Act (FCPA) by failing to put in place controls 
that could have detected and prevented $8 million in payments to Chinese government 
officials by employees and consultants at the company’s Chinese subsidiary between 
2004 and 2008. 

Source: http ://www . sec . go v/litigation/litreleases/20 1 4/lr23 1 5 9 .htm 

6. December 16, Richmond Times-Dispatch - (Virginia) Data compromised at Union 
First Market Bank. Richmond-based Union First Market Bank stated that they shut 
off all ATM capabilities for their customers’ debit cards after discovering skimming 
activities that affected over 3,000 customers’ cards. Affected customers were being 
contacted by the bank and issued new debit cards 

Source: http://www.roanoke.com/business/news/union-first-market-data-breach- 
affects-more-than-debit-eards/article 93a64ccc-855e-5448-802 l-cd70803622f3.html 

T Return to top i 

Transportation Systems Sector 

7. December 17, NJ.com - (New Jersey) 10 injured in NJ Transit bus, tractor-trailer 
crash on Turnpike in Linden. A 4- vehicle collision closed several lanes of the New 
Jersey Turnpike outer roadway near Finden for approximately 5 hours December 17 
after a semi-truck attempted to change lanes and struck the rear of a NJ Transit bus 
with 61 passengers on board. Ten bus passengers were transported to an area hospital 
with injuries. 

Source: 

http://www.ni.eom/union/index.ssf/2014/12/4 seriously injuried in nj transit bus tra 
ctor-trailer crash on turnpike in linden.html 
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8. December 17, KTEN 10 Ada - (Texas) One dead in wreck on Highway 82 in Fannin 
County. A head-on collision on eastbound U. S. Highway 82 in Savoy left one person 
dead and several others injured December 17 and prompted the road to close for several 
hours while crews cleared the scene. 

Source: http://www.kten.com/story/27651470/one-dead-in-wreck-on-highwav-82-in- 
fannin-county 

9. December 17, Cleveland Plain Dealer- (Ohio) United Airlines plane makes 
emergency landing in Cleveland after report of smoke in cockpit. A United Airlines 
plane en route to Newark, New Jersey, from Los Angeles was diverted to Cleveland 
Hopkins International Airport in Ohio December 17 after smoke was reported in the 
cabin. The plane landed safely and the passengers continued to Newark on other flights. 
Source: 

http://www.cleveland.com/metro/index.ssf/2014/12/united airlines plane makes em.h 
tml 

10. December 17, Reuters - (International) U.S.-bound United Airlines lands back in 
London after ‘maintenance issue’. A United Airlines flight that departed Heathrow 
Airport in London, England, to Newark, New Jersey, December 17 was forced to circle 
the English Channel for approximately 5 hours before it returned to Heathrow Airport 
due to a maintenance issue. The flight landed safely and the aircraft was inspected 
while the 227 passengers and 13 crew members on board were provided alternative 
travel arrangements. 

Source: http ://w w w .reuters . com/article/20 14/12/ 1 7/britain-airplane-unitedairlines- 
idUSL6N0U 1 3L220 141217 



11. December 17, WKMG 6 Orlando - (Florida) Volusia County deputies bust mail theft 
ring. Four suspects in a mail theft ring that affected four counties and resulted in more 
than $30,000 in check fraud were arrested December 17 in Volusia County and charged 
with organized scheme to defraud and passing counterfeit checks. Authorities reported 
that an investigation found that 15 people were connected to the theft ring, including a 
fifth suspect that was previously arrested on similar charges. 

Source: http://www.clickorlando.com/news/volusia-county-deputies-bust-mail-theft- 
ring/30281616 
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Food and Agriculture Sector 

12. December 17, KWCH 12 Hutchinson - (Kansas) Barn fire destroys farm equipment 
in Cheney. A barn fire on a Cheney, Kansas farm December 17 caused several propane 
tanks that were stored inside the building to explode and caused an estimated $150,000 
in damage to the structure and to several pieces of heavy farm machinery that was 
stored inside of the bam. The cause of the fire is under investigation. 

Source: http://www.kwch.com/news/local-news/Barn-fire-destrovs-farm-equipment-in- 
Cheney/3027 2788 
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13. December 17, U.S. Food and Drug Administration - (California) Bleating Heart 
Cheese issues voluntary recall of various cheeses due to possible health risk. The 
U.S. Food and Drug Administration reported December 17 that Bleating Heart Cheese 
issued a recall in cooperation with the California Departments of Food & Agriculture 
and Public Health for three types of its sheep milk and cow’s milk cheese products due 
to possible Listeria monocytogenes contamination. The products were shipped and sold 
to distributors servicing retail food shops, restaurants, and stores in the San Francisco 
Bay area beginning in October. 

Source: http://www.fda.gov/Safety/Recalls/ucm427328.htm 

14. December 17, Food Safety News - (National) CDC update: 111 sickened in 
Salmonella outbreak linked to bean sprouts. The U.S. Centers for Disease Control 
and Prevention (CDC) issued a report December 16 on a Salmonella outbreak linked to 
Wonton Foods-produced bean sprouts that sickened 111 people in 12 States, reflecting 
24 new reported illnesses since December 4. Wonton Foods agreed November 21 to 
destroy any remaining bean sprout products and completed a sanitation process of its 
facility before it resumed production November 24 and shipments November 29. 
Source: http://www.foodsafetvnews.com/2014/12/cdc-update-lll-sick-in-salmonella- 
outbreak-linked-to-bean-sprouts 
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Water and Wastewater Systems Sector 

15. December 17, Tri-County Times - (Michigan) 15,000 gallons of sewage dumped into 
Shiawassee River. An estimated 15,000 gallons of untreated sanitary sewer water 
discharged into the Shiawassee River in Fenton December 15 due to a construction 
accident that caused a sewer pipe to break. The pipe was repaired and samples were 
taken to test for E.coli while the city advised area residents to avoid contact with the 
river. 

Source: http://www.tctimes.com/news/gallons-of-sewage-dumped-into-shiawassee- 
river/article 6aa4dc8e-8600- 1 1 e4-aae3-c75beba 1 9a37.html 

For another story, see item 18 
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Healthcare and Public Health Sector 

16. December 17, Associated Press - (Illinois) Couple convicted of stealing grants. A 
Chicago businessman and his wife were convicted December 17 on more than a dozen 
counts including conspiracy, mail fraud, and money laundering for stealing $3.4 
million in grants through the Illinois Department of Public Health intended for AIDS 
awareness and other health campaigns that they instead used for personal expenses. 
Source: http://www.nwherald.com/2014/12/18/couple-convicted-of-stealing- 
grants/axewh6/ 
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17. December 16, Johnson City Press - (Tennessee) Computer outage at MSHA leaves 
staff off network. Mountain States Health Alliance’s health systems network 
experienced an unplanned shutdown for 4 hours December 16 prompting staff to 
manually record patient information after routine maintenance to emergency generators 
caused a network outage that affected 14 hospitals and dozens of other facilities 
throughout the region. 

Source: http://www.iohnsoncitvpress.com/article/122919/computer-outage-at-msha- 
leaves-staff-off-network 



[ Return to top ] 



Government Facilities Sector 

18. December 18, WTTG 5 Washington, D.C. - (Washington, D.C.) Contaminated water 
issues close 3 schools; do-not-drink advisory for Shaw neighborhood continues. 

Three elementary schools in the Shaw neighborhood north of downtown Washington, 
D.C., were closed December 18 amid a do-not-drink water advisory issued December 
17 due to petroleum contamination in the water system. Crews were working to flush 
water out of the system 

Source: http://www.mvfoxdc.com/storv/27653900/dc-water-issues-do-not-drink- 
advisory-shaw-neighborhood-nw-dc 

19. December 17, New Haven Register - (Connecticut) 1,000 lose power in West Haven, 
high school dismisses early. Two West Haven schools were without power December 
17 due to a power outage that affected more than 1,000 United Illuminating customers 
for several hours after a transformer went offline. The city’s high school began 
dismissing students early while students at the Mackrille Elementary School remained 
in class through the outage. 

Source: http://www.nhregister.com/general-news/20141217/100Q-lose-power-in-west- 
haven-high-school-dismisses-early 

20. December 16, Santa Barbara Noozhawk- (California) Los Padres’ Goleta office 
closed after flooding. The U.S. Forest Service office for the Los Padres National 
Forest in Goleta was expected to be closed for 6 to 8 weeks as crews work to repair 
extensive damage after water and mud breached a large part of the office building from 
a December 12 storm. 

Source: 

http://www.noozhawk.com/article/los padres goleta office closed after flooding 
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Emergency Services Sector 



21. December 17, Pittsburgh Tribune -Review - (Pennsylvania) No guns sold in state for 2 
hours while background checks unavailable. Pennsylvania State Police experienced 
a statewide outage December 17 that affected all State Police Internet-based systems 
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including background checks, and email and telephone systems at the State Police 
headquarters after a backup battery in the State Police’s Instant Check System 
exploded. The outage halted the sales of firearms for 2 hours. 

Source: http://triblive.com/news/adminpage/7398350-74/system-state-firearms 

22. December 16, KATV 7 Little Rock - (Arkansas) 3 injured after police car and MEMS 
Ambulance crash Three people were injured in Maumelle December 16 when a 
Maumelle Police vehicle collided with an ambulance at the intersection of Highway 
100 and Edgewood Drive. The damages were estimated to be worth up to $95,000. 
Source: http://www.katv.com/story/27645051/3-iniured-after-police-car-and-mems- 
ambulance-crash 



23. December 15, Harlingen Valley Morning Star - (Texas) Official charged after 
smuggling investigation. A U.S. Customers and Border Protection officer in 
Brownsville was arrested December 12 for allegedly helping a drug smuggler transport 
3,000 pounds of marijuana into the county in exchange for money and was charged 
with conspiracy to process with intent to distribute more than 1,000 kilograms and 
bribery. 

Source: http://www.vallevmorningstar.com/news/local news/article 2a25cld6-84cb- 
1 Ie4-9f09-ff56b6b95f02.html 



T Return to top i 

Information Technology Sector 

24. December 18, Securityweek- (International) Serious vulnerabilities found in 
Schneider Electric’s ProClima solution. An advisory from the Industrial Control 
Systems Computer Emergency Response Team (ICS-CERT) December 16 warned that 
five vulnerabilities in the Schneider Electrica ProClima thermal management software 
were identified and reported by researchers and could be remotely exploited. The 
software is used in industries such as manufacturing, energy, and commercial facilities 
and affects ProClima versions 6.0.1 and earlier. 

Source: http://www.securityweek.com/serious-vulnerabilities-found-schneider- 
electrics-proclima-solution 

25. December 18, Securityweek - (International) “USBdriveby” emulates mouse and 
keyboard to hijack computers. A researcher demonstrated an attack method known as 
USBdriveby that can use a USB-based microcontroller to emulate a mouse and 
keyboard to run several tasks including disabling security measures, opening 
backdoors, and changing DNS settings due to many systems trusting USB devices by 
default. The researcher tested the method on an OS X device but believes that it can be 
used on Windows and Unix operating systems, and the source code and operations for 
the attack were made public. 

Source: http://www.securitvweek.com/usbdrivebv-emulates-mouse-and-kevboard- 
hij ack-computers 

26. December 18, Help Net Security - (International) ICANN systems breached via 
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spear-phishing emails. The Internet Corporation for Assigned Names and Numbers 
(ICANN) stated December 16 that it was compromised via spearphishing emails during 
November and attackers were potentially able to access Centralized Zone Data System 
(CZDS) files and salted and hashed user information and credentials. ICANN 
deactivated all CZDS passwords as a precaution and notified all potentially affected 
users. 

Source: http://www.net-securitv.org/secworld.php?id=17769 

27. December 18, Softpedia - (International) Syrian Electronic Army hacks website of 
International Business Times. Hacktivists claiming affiliation with the Syrian 
Electronic Army group claimed responsibility for defacing the Web site of the 
International Business Times December 17. 

Source: http://news.softpedia.com/news/Svrian-Electronic-Army-Hacks-Website-of- 
International-Business-Times-467827.shtml 



28. December 18, Help Net Security - (International) Researcher publishes JavaScript 
DoS tool. A researcher with WhiteHat Security published a prototype denial of service 
(DoS) attack script named FlashFlood written in JavaScript December 16. The code 
could be used by attackers in DoS attacks or to trick victims into executing the code. 
Source: http://www.net-security.org/secworld.php?id=17771 

29. December 18, Help Net Security - (International) Ars Technica readers urged to 
change passwords in wake of hack. Ars Technica advised its registered readers to 
change their passwords as a precaution after an attacker briefly gained access to one of 
the site’s Web servers December 14. The site stated that the attacker may have been 
able to access hashed email addresses and passwords. 

Source: http://www.net-security.org/secworld.php?id=17768 

30. December 17, Securityweek - (International) Backdoor found in Android phones 
manufactured by Coolpad: Research. Researchers with Palo Alto Networks reported 
that at least 24 models of Android devices manufactured by Coolpad contained a 
backdoor that could active applications, install unwanted applications, and upload 
device information and location data. 

Source: http://www.securityweek.com/backdoor-found-android-phones- 
manufactured-coolpad-research 

31. December 17, Securityweek - (International) Xsser malware targeting iOS, Android 
devices. Researchers with Akamai identified a new mobile remote access trojan 
(mRAT) known as Xsser that is spread through phishing and man-in-the-middle 
(MitM) attacks and can steal credentials, execute code, and hijack browser sessions on 
Android and iOS devices. The researchers found that the mRAT is being used by an 
organized group currently targeting specific devices and software vendors, software-as- 
a-service (SaaS) providers, and Internet service providers mainly in Asia. 

Source: http://www.securityweek.com/xsser-malware-targeting-ios-android-devices 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

32. December 18, The Register - (International) URL LOL: Delta splats web flight 
boarding pass snoop bug. Delta Airlines patched a security vulnerability in its 
paperless boarding pass system that allowed hackers to access information on unknown 
individuals’ flights by adjusting the URLs used to serve digital copies of boarding 
passes to smart phones that appear as QR codes which are scanned at the gate. 

Source: 

http://www.theregister.co.uk/2014/12/18/delta fixes flaw that allowed hacker pass t 
o any flight anywhere any class/ 

33. December 17, WQAD 8 Quad Cities - (Illinois) Internet outage reported for some 
Mediacom Quad Cities-area customers. An equipment failure caused an Internet 
outage December 17 for Mediacom customers in four areas of Illinois. A Mediacom 
representative reported that a microchip was not functioning properly and was replaced 
to restore service. 

Source: http ://wq ad.com/20 14/12/ 1 7/internet-outage-reported-for-some-mediacom- 
customers-in-milan-and-rock-island/ 



34. December 17, International Data Group - (National) US Agency sues Sprint for 
alleged unauthorized charges. The U.S. Consumer Financial Protection Bureau 
announced December 17 that it filed a lawsuit against Sprint for allegedly billing 
cellular phone customers for tens of millions of dollars in unauthorized services from 
third-parties. Related charges by the U.S. Federal Communications Commission are 
pending. 

Source: http://www.networkworld.com/article/2860774/us-agency-sues-sprint-for- 
alleged-unauthorized-charges.html 

35. December 16, Scranton Times-Tribune - (Pennsylvania) WARM Radio back on the 
air, now with sports. WARM 590 AM Scranton returned to the air December 15 after 
going off air September 15 due to a failed transmitter caused by antiquated equipment. 
The equipment was updated and technical issues were resolved before operations were 
restored. 

Source: http://thetimes-tribune.com/news/warrn-radio-back-on-the-air-now-with- 
sports-1. 1803282 
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Commercial Facilities Sector 



36. December 18, Valdosta Daily Times - (National) Bomb threats evacuate Walmarts. 
At least 10 Walmart stores across the southeast region of the U.S., including several 
Georgia stores, were evacuated while police investigated a string of bomb threats that 
were phoned into police December 17. 

Source: http://www.valdostadailytimes.com/news/local news/bomb-threats-evacuate- 
walmarts/artiele 4b2abad8-865d- 1 1 e4-a9 1 3-7701 1 1 5a 1 94b.html 

37. December 18, Reuters - (California) Three killed, several injured in crash outside 
California church. Three individuals were killed and at least nine others were injured 
December 17 when a driver lost control of her vehicle and crashed into a crowd that 
was exiting a concert at St. James Catholic Church in Redondo Beach before colliding 
with another car. Police arrested the driver on charges of driving under the influence 
and manslaughter. 

Source: http://www.msn.com/en-us/news/us/three-killed-several-iniured-in-crash- 
outside-california-church/ar-BBgWxRQ 

38. December 18, Associated Press - (Texas) Central Texas TV meteorologist shot; 
gunman sought. A gunman opened fire and wounded a meteorologist with KCEN 6 
Temple following an altercation in the parking lot of the central Texas news studio 
December 17. The victim was transported to an area hospital for treatment and police 
are searching for the shooter who fled the scene. 

Source: http://www.msn.com/en-us/news/crime/central-texas-tv-meteorologist-shot- 
gunman-sought/ar-BBgVJiO 

39. December 17, Associated Press - (Delaware) Boxes fall on Dollar Tree worker, 
OSHA issues $103K fine. The Occupational Safety and Health Administration cited 
Dollar Tree Stores, Inc., for one willful and one repeat safety violation at a New Castle, 
Delaware store following a June inspection that revealed improperly stored boxes 
including one that fell onto an employee during the inspection. Proposed fines total 
$103,000. 

Source: 

http://www.13newsnow.com/story/news/local/mycity/chesapeake/2014/12/17/dollar- 

tree-fined/20536813/ 

40. December 17, WEWS 5 Cleveland - (Ohio) Target at Eastwood Mall in Trumbull 
County reopens after threat. A Target store at the Eastwood Mall in Niles, Ohio, was 
evacuated December 17 while police investigated a bomb threat that was found written 
in a bathroom stall. The store reopened about 2 hours after police searched and cleared 
the scene. 

Source: http://www.newsnet5.com/news/eastwood-mall-in-trumbull-county-evacuated- 
due-to-bomb-threat 



For another story, see item 24 
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Dams Sector 



Nothing to report 
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http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 
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